As Scott has noted, this is a very complex issue. I built those rules from the KB article I had found. The difference was that I had compiled a longer list of dangerous attachments. If you will note in the README that is included in the zip file, these rules have not been tested in a production environment and I also noted that there could be problems with the dot com rule.
I used "*" because when I specified anything, the rules didn't work. I'm sure there was something that I was doing wrong. I would like to see some kind of functionality built into IMAIL that would screen attachments instead of leaving it up to us to write rules. Maybe by provoking this discussion, we all can come up with a good set of standard rules to share with everyone. That is until IPSwitch provides the functionality that several of us have already requested. Excuse my typo. Darn spell check. Yes, it should be begin. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Schaible Sent: Tuesday, June 01, 2004 5:47 PM To: Todd Bierbaum Subject: Re: [IMail Forum] Blocking Attachments Hi Todd, I build my rules a bit different. Instead of using the !OR!, i made it a bit simpler: B~name=.{1,30}\.(bat|chm|cmd|cpl|exe|ex_|hta|lnk|shs|scr|sc_|theme|pif|v bs):[EMAIL PROTECTED] I also use a specific number of chars between "name" and an extension. Especially with com-files, the number of false positives will increase without it. I never saw a "being". Do you mean "begin"? This would be correct... ==================================== Am Dienstag, 1. Juni 2004 um 23:44 schrieben Sie: > For all that are interested. The rules that I mentioned, can be > downloaded using the following link. > http://www.onx.cc/request.php?99 > IpSwitch Tech Support just advised me that it would be best to break > each of these rules into two. I had some problems with the rules be > truncated. So if you were to use the rules exactly as I have them in > the zip file and you correctly split them, there should be a total of > four rules for inbound and four for outbound. > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ==================================== -- Mit freundlichen Gr�ssen ==================================== Merlin Consulting Martin Schaible Bahnhofstrasse 27 CH-8702 Zollikon Phone: +41 1 391 30 00 Fax: +41 1 391 32 49 mail: mailto:[EMAIL PROTECTED] URL: http://www.merlinconsulting.ch GPS: N47 20.235 E8 34.226 ==================================== To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
